PT-2009-1134 · Microsoft · Internet Information Services

Parcifal Aertssen · Publicado 2009-01-15 · Atualizado 2017-08-08 · CVE-2003-1566

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Internet Information Services (IIS) version 5.0

Description The issue allows remote attackers to obtain sensitive information without detection because it does not log requests that use the TRACK method.

Recommendations For Microsoft Internet Information Services (IIS) version 5.0, consider disabling the TRACK method to prevent exploitation until a patch is available.

Exploit

Correção

Enumeração de Fraquezas

CWE-16

Identificadores relacionados

CVE-2003-1566

Produtos afetados

Internet Information Services

Referências · 8

• 🔥 https://exploit-db.com/exploits/23490 · Exploit
• 🔥 http://archives.neohapsis.com/archives/ntbugtraq/2003-q4/0321.html · Exploit
• 🔥 http://aqtronix.com/Advisories/AQ-2003-02.txt · Exploit
• 🔥 http://securityfocus.com/bid/9313 · Exploit
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1566 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/14077 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2003-1566 · Nota de Segurança
• http://osvdb.org/4864 · Nota